Every fraud system watches the money. None of them watch the manipulation.

A payment looks legitimate because the customer authorised it. Transaction monitoring sees an account holder moving their own money to an account they chose, which is what it is built to allow. What made them choose it happened in a text message, hours earlier, somewhere your systems have never been able to look.

By the time an alert is confirmed the money has gone, and the loss, the report and the complaint are yours.

Book a call

Read the 314(b) paper

Thirty minutes with the Flggd team.

What we see that a bank does not

What the bank sees, against what Flggd seesA scam timeline from the first message on day zero to the payment. Flggd sees the early messages a customer forwards, from the first message through trust and pressure; the coaching before the payment it usually does not see. The bank sees nothing until payment day, and then only the payment. The bank sees the payment, never the conversation.What Flggd seesfrom what the customer forwardsWhat the bank seesfrom its own systemsDay 0The first messageThenA replyHours or weeksTrust, then pressureBefore the paymentCoachingPayment dayThe paymentNothingNothingNothingNothingThe paymentThe gap: everything before the paymentWhat the bank sees, against what Flggd seesA scam timeline from the first message on day zero to the payment. Flggd sees the early messages a customer forwards, from the first message through trust and pressure; the coaching before the payment it usually does not see. The bank sees nothing until payment day, and then only the payment. The bank sees the payment, never the conversation.WhatFlggd seesWhat thebank seesDay 0The firstmessageNothingThenA replyNothingHours or weeksTrust, thenpressureNothingBefore the paymentCoachingNothingPayment dayThe paymentThepaymentThe gap

Choose a moment to see what happened, what Flggd saw and what the bank saw.

Day 0

The first message

What happened
A message arrives that looks ordinary: a delivery notice, a wrong number, a job offer. Its only aim is a reply.
What Flggd saw
The message itself, when the customer forwards it.
What the bank saw
Nothing. It arrived on a channel the bank cannot see.

Then

A reply

What happened
The customer answers. The people who reply have selected themselves for the scam.
What Flggd saw
The conversation, as the customer forwards it.
What the bank saw
Nothing. No account event exists.

Hours or weeks

Trust, then pressure

What happened
Rapport, a small proof that it is real, then urgency and secrecy.
What Flggd saw
The tactics, in the messages the customer forwards.
What the bank saw
Nothing in the data. At most a new payee or a raised limit, each unremarkable on its own.

Before the payment

Coaching

What happened
The customer is told what to say to the bank, and to expect the bank to try to stop it.
What Flggd saw
Usually nothing. Coaching happens on calls and in chats that people rarely forward.
What the bank saw
A confident customer with an answer to every question.

Payment day

The payment

What happened
The customer authorises the payment themselves, so it clears.
What Flggd saw
Only what the customer forwarded earlier, if they did.
What the bank saw
The payment, and nothing that caused it.

The bank sees the payment, never the conversation.

The gap is not a detection problem. It is a location problem. The attack arrives on a phone, in a channel no fraud system is connected to, and it works by persuading a person rather than by defeating a control.

So the only place to intervene is the moment the customer wonders whether the message is real. They already hesitate. Nothing in your stack is positioned to answer them while they are hesitating.

Where the signal comes from, how a verdict is produced, and what Flggd does not claim.

How Flggd sees it

What Flggd has published

165 scam pages, twelve types and eleven tactics, each dated and each carrying the message that produced it. A fraud lead can check the whole set without a call.

This is the argument that only works once the corpus is public, which it now is.

How it reaches your customers

Five things, each doing a different job. An institution can start with one, and most start with SafeLine because it needs nothing built.

Your customers forward a suspicious text to a number under your brand and get an answer in seconds. No app for them to install, nothing for you to integrate.

SafeLine

The verdict engine as an endpoint, for an institution that wants to call it from its own systems.

The API

For embedding scam checking inside an application your institution already ships.

The SDK

The Flggd app published under your institution's name, on the App Store and Google Play. Your customers get protection in their pocket and your brand is the reason they have it.

The whitelabel app

Model it against your own numbers

Put your own volumes in and see what your scam losses look like. The output is a report you can forward, with every assumption visible, because a fraud lead who cannot see the assumptions has no reason to trust the number.

Model your own losses

Security and data questions

What leaves your institution, what is retained, where it runs and who can see it, written to be read by a vendor risk review without anyone having to book a call.

Security and data

Or talk to someone for thirty minutes.

Book a call

Worried about someone in your own family?

Check a message free.

Every example on this page is a real scam, recreated by Flggd
How we decide what is a scam